# ISO/IEC 27005:2008 — Withdrawn and superseded ISO standards

For ISO/IEC 27005:2008, item title is Information technology — Security techniques — Information security risk management; status code is 9599; successor is ISO/IEC 27005:2011; withdrawn / published date is 2008-06-04, recorded from its source on 2026-08-05.

- **Identifier:** ISO/IEC 27005:2008 _(verified: appears in the quote below)_
- **Item title:** Information technology — Security techniques — Information security risk management _(verified: appears in the quote below)_
- **Status code:** 9599 _(verified: appears in the quote below)_
- **Successor:** ISO/IEC 27005:2011
- **Withdrawn / published date:** 2008-06-04 _(verified: appears in the quote below)_

## What the source says

> 42107,IS,,ISO/IEC 27005:2008,Information technology — Security techniques — Information security risk management,Technologies de l'information — Techniques de sécurité — Gestion des risques en sécurité de l'information,2008-06-04,1,"['35.030','03.100.70']",ISO/IEC JTC 1/SC 27,9599,"[29240,21756]",[56742],"['en','fr']",55,"<p>ISO/IEC 27005:2008 provides guidelines for information security risk management. It supports the general concepts specified in ISO/IEC 27001 and is designed to assist the satisfactory implementation of information security based on a risk management approach. Knowledge of the concepts, models, processes and terminologies described in ISO/IEC 27001 and ISO/IEC 27002 is im

## Source

- https://isopublicstorageprod.blob.core.windows.net/opendata/_latest/iso_deliverables_metadata/csv/iso_deliverables_metadata.csv

Last verified: 2026-08-05. Review by: 2027-02-01.
Part of [Withdrawn and superseded ISO standards](https://referencesource.org/iso-standard-supersessions/).